Alfa bin files

Bosch Motronic etc ECUs and PCMs
User avatar
DieselBob
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
cars: Vr SII Ute
Location: Brisbane QLD

Re: Alfa bin files

Post by DieselBob »

Not sure I'll ask.... I'll try the calc tonight and see what it throws out
User avatar
festy
Posts: 1039
Joined: Sat Apr 30, 2011 6:27 pm
cars: Alfa Romeos
Location: Narellan, NSW

Re: Alfa bin files

Post by festy »

Not sure how far along you are with this, but here's a very basic xdf for all the tables I could find if you haven't already made one.
Attachments
Alfa164_24v.xdf
(142.41 KiB) Downloaded 351 times
User avatar
DieselBob
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
cars: Vr SII Ute
Location: Brisbane QLD

Re: Alfa bin files

Post by DieselBob »

I'll look tonight tomorrow..
Got most of the tables looking for the constants and op codes.
The chipset is a siemens copy of an intel based 80c515
variant 80535
found the userguide for the chipset and a pocket guide in english for the opcodes..
tried a couple of dissassemblers but i'm having a checksum invalid problem... must be a bosch specific thing...
when i get it running properly i'll let you know trying to automate the spreadsheet to find and build the tables and show the table lookup address calls..
opcode stuff will take longer but reasonble progress so far :)
User avatar
DieselBob
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
cars: Vr SII Ute
Location: Brisbane QLD

Re: Alfa bin files

Post by DieselBob »

Ok dissassembly done :)
Tables found.
Now to work out the addresssing and find the constants..
Like norm found loads of good info scattered all over
Kinda wondering if anyone had ideas on where to post it
here or another forum?
Let me know
User avatar
festy
Posts: 1039
Joined: Sat Apr 30, 2011 6:27 pm
cars: Alfa Romeos
Location: Narellan, NSW

Re: Alfa bin files

Post by festy »

If not here, BoschDME yahoo group maybe?
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: Alfa bin files

Post by antus »

I think you should post it here. We love pulling ecus apart and seeing what we can figure out. Its good fun stuff :)
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
User avatar
DieselBob
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
cars: Vr SII Ute
Location: Brisbane QLD

Re: Alfa bin files

Post by DieselBob »

Here it is then :)
User avatar
DieselBob
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
cars: Vr SII Ute
Location: Brisbane QLD

Re: Alfa bin files

Post by DieselBob »

MOTRONIC M7.1
This is for a Motronic M1.7.
From what I can find out it applies to most early motronic ECM’s.
M1.x Probably M1.3 to M1.7 the M1.7.x variations are different and I don’t know how much is relevant.
First I tried brute force with a Excel sheet and found most of the tables  then with some help from Festy got the start of a .xdf..
Then I started finding the gems.

Some extracts…
0x0000 - 0x1fff (Main internal code ... I need a friend at BOSCH!)
0x2000 - 0x3fff (Engine specific subroutines / interrupt service code)
0x4000 - 0x4fff (Data MAPs used by the EPROM subroutines)
0x5000 - 0x65ff (THIS IS THE GOOD STUFF!!!)
0x6600 - 0x7fff (More Engine specific subroutines working with 0x2000-3fff)

"The upper 4kB of ROM contains the constants and maps along with a jump table
that allows manufacturers to change certain operations in the 24-pin DMEs even
though the internal 4kB ROM in the micro is untouchable"

The chipset user manual Siemens SAB80535 is a copy of the Intel 80C515 - 535 variant using the same instruction set.
Which are covered in the Siemens 80C5xx Pocket Guide.
Then I found DIS8051 which is a free disassembler.
Then I got onto the ECUConnections website.. The mother lode how-to guides and all sorts of goodies mostly thanks to Midas, the .xdf generator is his.
The RAM load from 0000 to 1FFF is loaded from a separate chip on the main board (don’t know haven’t gone there yet..).
So with an offset of 2000 in a disassemble you should be able to make sense of most of the code..

At this stage still working on the code trying to isolate Rev limit and AFM constants.
Last edited by DieselBob on Sat Aug 10, 2013 9:16 pm, edited 1 time in total.
User avatar
festy
Posts: 1039
Joined: Sat Apr 30, 2011 6:27 pm
cars: Alfa Romeos
Location: Narellan, NSW

Re: Alfa bin files

Post by festy »

I found the bosch realtime write routine today for the ml4.1 - first tests look good with nvram board ;)
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: Alfa bin files

Post by antus »

Good progress there :thumbup:
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Post Reply